Top Cloud Security Engineer Jobs

Build, test, automate, and deploy security controls for AWS and Azure cloud workloads. Assess cloud security posture using CSPM tools, integrate controls into CI/CD and infrastructure pipelines, validate compliance, and support production readiness. Collaborate with cloud architects, SOC, product, infrastructure, and DevOps teams; document solutions, analyze vulnerabilities, guide junior engineers, and contribute to security roadmap planning.

Drive technical discovery, gap analysis, and security architecture validation for Google Cloud, Google Workspace, and ServiceNow GCC-High ATO modernization. Evaluate environments against NIST SP 800-53 Revision 5, DoD IL-4, and FedRAMP requirements; identify control gaps and risks; validate inherited and shared responsibilities; collect technical evidence; and develop accurate RMF control narratives and reports. The role also performs human validation of AI-assisted technical content and supports cohesive authorization packages.

Designs and operates cloud security guardrails across AWS, GCP, and Azure. Responsibilities include secure architecture, IAM, network segmentation, encryption, secrets management, IaC and CI/CD security, automation, CSPM, logging, detection, incident response, and compliance evidence. The role requires hands-on DevOps or platform experience, production security across multiple cloud providers, coding and scripting, Terraform or OpenTofu, and strong collaboration with engineering teams.

Own cloud security posture across multi-account AWS and Kubernetes environments, including EKS, Istio, identity, PKI, encryption, and policy-as-code. Design security guardrails, harden platforms against compliance standards, develop detections, threat hunt, automate controls with Terraform and Python, and support incident response. Partner with engineering, AppSec, and GRC teams, produce compliance evidence, mentor teammates, and develop AI-assisted security automation.

Leads the design and implementation of enterprise cloud security controls across AWS environments. Builds policy-as-code, infrastructure-as-code, CI/CD guardrails, posture checks, drift detection, and automated remediation. Establishes technical standards, mentors engineers, influences cross-team architecture, operationalizes CSPM findings, supports audit and governance activities, and participates in on-call rotations.

Designs, implements, and continuously monitors security solutions across AWS, Azure, and GCP. Configures cloud-native and third-party security tools, performs vulnerability management, intrusion detection, SIEM operations, OS hardening, IAM implementation, and security impact assessments. Prepares A&A documentation, including SSPs and control worksheets, supports compliance with FISMA, FedRAMP, and NIST 800-53, and automates security processes for federal government environments.

Architects, deploys, and sustains secure cloud, hybrid-cloud, and on-premises environments for federal systems. Develops security baselines, monitoring capabilities, logging strategies, documentation, and system controls; supports audits, incident reporting, access management, root-cause analysis, and cost optimization. Serves as a cloud security subject-matter expert, conducts security solution research, and provides training and knowledge transfer.

Architects, deploys, and sustains secure AWS, hybrid-cloud, and on-premises environments for federal systems. Develops security baselines, documentation, monitoring, logging, and incident-reporting capabilities; supports audits, access management, change-impact and root-cause analysis, and cloud cost optimization. Serves as the cloud security subject matter expert, conducts security solution research, manages service-desk processes, and provides security training and knowledge transfer.

Provides intermediate-level support for designing, implementing, and maintaining AWS cloud security controls, IAM policies, monitoring systems, and security frameworks. Investigates cloud security and access incidents, performs risk assessments and vulnerability remediation, monitors logs and security events, and supports identity governance. Collaborates with engineering, DevOps, and application teams to implement secure cloud solutions while improving automation, documentation, compliance, and operational efficiency.

Designs, implements, and maintains security controls across enterprise cloud, infrastructure, endpoint, and application environments. Supports secure configuration, vulnerability remediation, logging and monitoring integration, control validation, security assessments, audits, documentation, and continuous improvement of security standards and engineering processes.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Leads cloud security architecture and engineering across Azure, multi-cloud, on-premises, and hybrid environments. Implements IaC security controls, Zero Trust, IAM modernization, threat modeling, monitoring, incident response, compliance, and secure CI/CD practices. Collaborates with product, platform, and infrastructure teams to improve cloud resilience, governance, visibility, and secure deployment practices.

Designs and implements secure cloud architectures for mission-critical Air Force systems. Evaluates RMF and NIST compliance, manages DevSecOps security scanning, hardens systems and containers, protects secrets, documents network and data flows, evaluates cloud services, and develops infrastructure as code using CloudFormation or Terraform. The role also supports security tools, government information assurance requirements, and mentorship of cloud security professionals.

Supports the integration, testing, configuration, and operation of cloud and on-premises security controls. Evaluates cloud security tools through proof-of-concept testing, documents results, maintains architectural diagrams and runbooks, and assists with security-control deployments. Provides technical support to agency stakeholders, collaborates with project teams, and helps align security readiness with deployment schedules in a 24/7 operational environment.

Supports the integration, testing, configuration, and operation of defensive security technologies across hybrid cloud and on-premises environments. Evaluates cloud security tools through proof-of-concept testing, documents results, maintains architectural diagrams and operational runbooks, and assists with security-control deployments. Provides technical support to agency stakeholders and coordinates security readiness with project teams. The role may require nights, weekends, or varied shifts in a 24/7 operation.

Develop and operationalize cloud security strategies, technologies, monitoring, alerting, automation, and security operations integrations. Design security infrastructure across cloud environments, interconnect diverse security event sources, support DevOps initiatives, and improve tooling and operational frameworks. The role requires hands-on security engineering experience across network, system, application, authentication, cryptography, vulnerability management, and enterprise cloud technologies.

Lead the design, deployment, and operation of network security infrastructure across hybrid on-premise and multi-cloud environments. Manage firewalls, load balancers, IDS/IPS, IAM controls, monitoring, vulnerability remediation, compliance, and incident response. Partner with architecture, security, and operations teams to improve observability, threat detection, resilience, and operational readiness across hyperscale networks.

The Cloud Security Engineer designs and maintains security controls across cloud, SaaS, and enterprise application environments. Responsibilities include cloud architecture, IAM, Zero Trust, DevSecOps, vulnerability management, threat detection, incident response, security assessments, automation, compliance, and remediation. The role partners with technology and business teams, supports secure development and CI/CD practices, provides security guidance, and communicates risks and recommendations to business stakeholders.

Lead cloud security architecture across AWS and GCP, strengthening identity, access management, workload protection, encryption, secrets management, and secure deployment paths. Build Terraform and policy-as-code guardrails, improve cloud threat visibility and detection, support threat hunting and incident response, and drive strategic security initiatives across engineering teams. Provide technical leadership, mentorship, and guidance while delivering measurable security improvements at scale.

Leads cybersecurity engineering activities, including security policy enforcement, access administration, firewall and intrusion detection management, vulnerability scanning, security reviews, compliance auditing, encryption, and security infrastructure projects. The role manages multiple cross-functional initiatives, recommends security products, analyzes logs and access data, documents security procedures, and mentors security engineers and contractors.

Leads cybersecurity engineering and infrastructure initiatives, including security policy enforcement, access administration, firewall and proxy management, vulnerability scanning, logging, intrusion detection, encryption, and OS hardening. Reviews security models and products, audits application access for SOX and PCI compliance, manages multiple cross-functional projects, documents security procedures, and mentors security personnel and contractors. This is a hybrid role requiring at least two weekly office days in Reading, Pennsylvania.

Leads cybersecurity architecture for cloud-based digital health platforms, connected medical-device ecosystems, web and mobile applications, APIs, and remote monitoring services. Responsibilities include defining security requirements, threat modeling, risk analysis, identity and access controls, encryption, secrets management, SBOM requirements, DevSecOps controls, monitoring, vulnerability management, and compliance readiness. The role coordinates audits, evidence collection, remediation, regulatory submissions, and security programs involving engineering, quality, privacy, IT, and business stakeholders.

Architects, deploys, and operates cloud security controls across AWS, Azure, GCP, SaaS, IaaS, and PaaS environments. Owns cloud security standards, policy as code, guardrails, detection engineering, incident response, risk remediation, vendor assessments, compliance alignment, and the cloud security roadmap. Partners with engineering and product teams, mentors engineers, and drives secure-by-default development across multiple brands and business units.

Build and operate application and cloud security automation, including vulnerability triage pipelines, AI-assisted security review, Google Cloud hardening, CI/CD scanning, and software supply chain controls. Review authorization, identity, and tenancy designs; coordinate remediation across engineering teams; handle security findings, incidents, access questions, and assessments; and create runbooks that standardize security processes.

Lead cloud security architecture and threat hunting across enterprise cloud environments. Partner with engineering, product, and risk teams to embed secure-by-design controls, conduct threat models and risk assessments, review infrastructure-as-code, develop preventive and detective controls, and operationalize detections with cybersecurity teams. Analyze large datasets, improve alerting and incident-response playbooks, investigate cloud threats, and provide expertise on adversary tradecraft and emerging risks.